1 files changed, 45 insertions, 0 deletions
diff --git a/js/src/tests/test262/built-ins/Array/prototype/indexOf/calls-only-has-on-prototype-after-length-zeroed.js b/js/src/tests/test262/built-ins/Array/prototype/indexOf/calls-only-has-on-prototype-after-length-zeroed.js
new file mode 100644
index 0000000000..fb95f97899
--- /dev/null
+++ b/js/src/tests/test262/built-ins/Array/prototype/indexOf/calls-only-has-on-prototype-after-length-zeroed.js
@@ -0,0 +1,45 @@
+// Copyright (C) 2018 André Bargull. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-array.prototype.indexof
+description: >
+  Calls [[HasProperty]] on the prototype to check for existing elements.
+info: |
+  22.1.3.12 Array.prototype.indexOf ( searchElement [ , fromIndex ] )
+
+  ...
+  2. Let len be ? ToLength(? Get(O, "length")).
+  ...
+  4. Let n be ? ToInteger(fromIndex). (If fromIndex is undefined, this step produces the value 0.)
+  ...
+  8. Repeat, while k < len
+    a. Let kPresent be ? HasProperty(O, ! ToString(k)).
+    b. If kPresent is true, then
+      i. Let elementK be ? Get(O, ! ToString(k)).
+      ...
+includes: [proxyTrapsHelper.js]
+features: [Proxy]
+---*/
+
+var array = [1, null, 3];
+
+Object.setPrototypeOf(array, new Proxy(Array.prototype, allowProxyTraps({
+    has: function(t, pk) {
+        return pk in t;
+    }
+})));
+
+var fromIndex = {
+    valueOf: function() {
+        // Zero the array's length. The loop in step 8 iterates over the original
+        // length value of 100, but the only prototype MOP method which should be
+        // called is [[HasProperty]].
+        array.length = 0;
+        return 0;
+    }
+};
+
+Array.prototype.indexOf.call(array, 100, fromIndex);
+
+reportCompare(0, 0);